CVE-2026-48294

Name of the Vulnerable Software and Affected Versions Adobe Acrobat PDF Extension (Chrome) versions prior to 26.5.2.3

Description A UXSS-class cross-origin data disclosure issue exists where an attacker can gain access to the victim's session data. UXSS (Universal Cross-Site Scripting) is a type of vulnerability that allows an attacker to execute scripts across different origins by exploiting a flaw in a browser extension or the browser itself. Exploitation requires user interaction, such as visiting a maliciously crafted URL or interacting with a compromised web page.

Recommendations Update Adobe Acrobat PDF Extension (Chrome) to a version newer than 26.5.2.2.